PT-2025-17655 · Totolink · Totolink A950Rg+3

Published 2025-04-23 · Updated 2025-04-23 · CVE-2025-28028

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TOTOLINK A830R version 4.1.2cu.5182 B20201102 TOTOLINK A950RG version 4.1.2cu.5161 B20200903 TOTOLINK A3000RU version 5.9c.5185 B20201128 TOTOLINK A3100R version 4.1.2cu.5247 B20211129

Description A buffer overflow issue was discovered in the downloadFile.cgi endpoint through the v5 parameter.

Recommendations For TOTOLINK A830R version 4.1.2cu.5182 B20201102, avoid using the v5 parameter in the "downloadFile.cgi" endpoint until a fix is available. For TOTOLINK A950RG version 4.1.2cu.5161 B20200903, restrict access to the downloadFile.cgi endpoint to minimize exploitation risk. For TOTOLINK A3000RU version 5.9c.5185 B20201128, consider disabling the downloadFile.cgi endpoint temporarily. For TOTOLINK A3100R version 4.1.2cu.5247 B20211129, refrain from using the vulnerable v5 parameter in the downloadFile.cgi endpoint.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2025-12681

CVE-2025-28028

Affected Products

Totolink A3000Ru

Totolink A3100R

Totolink A830R

Totolink A950Rg

References · 7

• 🔥 https://locrian-lightning-dc7.notion.site/CVE-2025-28028-BufferOverflow4-1948e5e2b1a280b9809af4db6f9e65d1 · Exploit
• 🔥 https://locrian-lightning-dc7.notion.site/BufferOverflow4-1948e5e2b1a280b9809af4db6f9e65d1 · Exploit
• https://osv.dev/vulnerability/CVE-2025-28028 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-28028 · Security Note
• https://bdu.fstec.ru/vul/2025-12681 · Security Note
• https://twitter.com/VulmonFeeds/status/1915125508972425379 · Twitter Post
• https://t.me/cvetracker/22210 · Telegram Post